I don't know, but Microsoft doesn't care anyway (or so they say), according to http://www.computerworld.com/s/article/9217116/Microsoft_downplays_IE_cookiejacki

I don't know, but Microsoft doesn't care anyway (or so they say), according to http://www.computerworld.com/s/article/9217116/Microsoft_downplays_IE_cookiejacking_bug http://www.computerworld.com/s/article/9217116/Microsoft_dow... . But I do hope that he told Microsoft before the world.